- release_tracks: [ALPHA, BETA, GA]

  help_text:
    brief: Get the IAM policy for a Cloud Run service.
    description: |
      This command gets the IAM policy for a service. If
      formatted as JSON, the output can be edited and used as a policy
      file for *set-iam-policy*. The output includes an "etag" field
      identifying the version emitted and allowing detection of
      concurrent policy updates; see
      $ gcloud alpha run registries set-iam-policy for additional details.
    examples: |
      To print the IAM policy for a given service, run:

        $ {command} --region=us-central1 my-service

  request:
    collection: run.projects.locations.services
    modify_request_hooks:
    - googlecloudsdk.command_lib.run.platforms:ValidatePlatformIsManaged

  arguments:
    resource:
      help_text: The service for which to display the IAM policy.
      spec: !REF googlecloudsdk.command_lib.run.resources:service
      # The --region flag is specified at the group level, so don't try to add it here
      removed_flags: ['region']
      command_level_fallthroughs:
        region:
        - arg_name: 'region'

  ALPHA:
    iam:
      policy_version: 3
      get_iam_policy_version_path: options_requestedPolicyVersion
  BETA:
    iam:
      policy_version: 3
      get_iam_policy_version_path: options_requestedPolicyVersion